how to use saslauthd AND sasldb

Andrew J Caird andrew.caird at
Mon Jun 28 14:22:32 EDT 2004

On Mon, 28 Jun 2004, Jukka Salmi wrote:

> Hello,
> is it possible to configure Cyrus IMAPd (2.2.6, Cyrus SASL 2.1.18) to
> use both saslauthd and sasldb?
> The problem I want to solve: some users are stored in Kerberos, some are
> in a sasldb. I'd like Cyrus IMAPd to contact saslauthd (for plaintext
> authentication with the kerberos service), and, if this fails, to try to
> authenticate the user against the sasldb - or vice versa.
> Using saslauthd _or_ sasldb (via auxprop plugin) works fine; however, I
> don't know to make PLAIN logins work with both mechanisms - in case
> that's possible at all.

  I think you can do this by listing multiple methods after the
"sasl_pwcheck_method" option in imapd.conf, for example:
	sasl_pwcheck_method: saslauthd auxprop
  I do this to authenticate users via LDAP, but authenticate the admin
user locally via sasldb.
  If I'm doing this wrong, let me know! :)
Cyrus Home Page:
Cyrus Wiki/FAQ:
List Archives/Info:

More information about the Info-cyrus mailing list